@article{whentooloutputsbecomecommandsseparatinga,
  title = {When Tool Outputs Become Commands: Separating Action Induction from Runtime Authorization in Tool-Augmented LLM Agents},
  author = {Xiaokun Guo and Zhen Xu and Dongdong Huo and Yanqiu Zhang and Wei Wang and Qinfu Yang and Dongjin Yu and Yu Wang},
  year = {2026},
  eprint = {2608.27146},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2608.27146},
}